Abstract:With the rapid development of low-cost consumer electronics and cloud computing, Internet-of-Things (IoT) devices are widely adopted for supporting next-generation distributed systems such as smart cities and industrial control systems. IoT devices are often susceptible to cyber attacks due to their open deployment environment and limited computing capabilities for stringent security controls. Hence, Intrusion Detection Systems (IDS) have emerged as one of the effective ways of securing IoT networks by monitoring and detecting abnormal activities. However, existing IDS approaches rely on centralized servers to generate behaviour profiles and detect anomalies, causing high response time and large operational costs due to communication overhead. Besides, sharing of behaviour data in an open and distributed IoT network environment may violate on-device privacy requirements. Additionally, various IoT devices tend to capture heterogeneous data, which complicates the training of behaviour models. In this paper, we introduce Federated Learning (FL) to collaboratively train a decentralized shared model of IDS, without exposing training data to others. Furthermore, we propose an effective method called Federated Learning Ensemble Knowledge Distillation (FLEKD) to mitigate the heterogeneity problems across various clients. FLEKD enables a more flexible aggregation method than conventional model fusion techniques. Experiment results on the public dataset CICIDS2019 demonstrate that the proposed approach outperforms local training and traditional FL in terms of both speed and performance and significantly improves the system's ability to detect unknown attacks. Finally, we evaluate our proposed framework's performance in three potential real-world scenarios and show FLEKD has a clear advantage in experimental results.

Federated deep learning for anomaly detection in the internet of things

Deep Learning for Anomaly Detection in IoT Systems: Techniques, Applications, and Future Directions

Anomaly Detection of IoT Cyberattacks in Smart Cities Using Federated Learning and Split Learning

Federated Deep Learning Approaches for the Privacy and Security of IoT Systems

Security and Privacy-Enhanced Federated Learning for Anomaly Detection in IoT Infrastructures

Improved Intrusion Detection Based on Hybrid Deep Learning Models and Federated Learning

Federated Deep Learning for Intrusion Detection in IoT Networks

Federated Deep Learning for Cyber Security in the Internet of Things: Concepts, Applications, and Experimental Analysis

Strengthening network DDOS attack detection in heterogeneous IoT environment with federated XAI learning approach

Machine Learning and Deep Learning Techniques for Internet of Things Network Anomaly Detection—Current Research Trends

Enhancing Cybersecurity in IoT Networks: A Deep Learning Approach to Anomaly Detection

Design and Development of a Deep Learning-Based Model for Anomaly Detection in IoT Networks

Deep Anomaly Detection for Time-Series Data in Industrial IoT: A Communication-Efficient On-Device Federated Learning Approach

Network Anomaly Detection Using Federated Learning

A Federated Learning-Based Approach for Improving Intrusion Detection in Industrial Internet of Things Networks

Enhancing IoT network security through deep learning-powered Intrusion Detection System

Effective Intrusion Detection in Heterogeneous Internet-of-Things Networks via Ensemble Knowledge Distillation-based Federated Learning

A Novel Deep Learning-Based Intrusion Detection System for IoT Networks

Efficient Privacy-Preserving Federated Deep Learning for Network Intrusion of Industrial IoT

Federated Learning for Decentralized DDoS Attack Detection in IoT Networks